An attack compromises Axios, one of the most popular packages in the JavaScript ecosystem

An attacker hijacked the account of the software’s main developer and published two malicious versions that installed a remote access Trojan on Windows, macOS and Linux. The package accumulates more than 100 million weekly downloads Read

Source